AsmLSec: An extension of abstract state machine language for attack scenario specification

Proceedings - Second International Conference on Availability, Reliability and Security, ARES 2007

Volumn , Issue , 2007, Pages 775-782

  Raihan, Mohammad ^a   Zulkernine, Mohammad ^a  

^a QUEEN S UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER SOFTWARE; FORMAL LANGUAGES; LIFE CYCLE; MATHEMATICAL MODELS; SEMANTICS;

SERVICE PACKS; SOFTWARE VENDORS; STATE MACHINE LANGUAGE;

SECURITY OF DATA;

EID: 34548132900     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2007.45     Document Type: Conference Paper

References (15)

1. S. Axelsson. Intrusion Detection Systems: A Survey and Taxonomy. Technical Report 99-15, Dept. of Computer Engineering, Chalmers University of Technology, Sweden, March 2000.
2. M. Barnett and W. Schulte. The ABCs of Specification: Asml, Behavior, and Components. Informatica (Slovenia), 25(4), 2001.
3. S. Eckmann, G. Vigna, and R. Kemmerer. STATL: An Attack Language for State-based Intrusion Detection. Computer Security, 10(1/2):71-104, 2000.
4. M. Graves, and M. Zulkernine. Bridging The Gap: Software Specification Meets Intrusion Detector. in Proceedings of the Fourth Annual Conference on Privacy, Security and Trust, Toronto, Canada, October 2006. 265-274.
5. Y. Gurevich. Evolving Algebras 1993: Lipari Guide. In E. Börger, editor, Specification and Validation Methods, pages 9-37. Oxford University Press, 1994.
6. S. Houmb, F. den Braber, M. S. Lund, and K. Stolen. Towards a UML Profile for Model-Based Risk Assessment. In Proceedings of the UML'02 Workshop, pages 79-92, Germany, 2002.
7. M. Hussein and M. Zulkernine. UMLintr: A UML Profile for Specifying Intrusions. In Proceedings of the IEEE International Conference and Workshop on the Engineering of Computer-Based Systems, pages 279-288, Germany, 2006.
8. J. Jürjens. UMLsec: Extending UML for Secure Systems Development. In Proceedings of the UML 2002, LNCS(2460), pages 412-425, Germany, September/October 2002.
9. R. Lippmann, J. W. Haines, D. J. Fried, J. Korba, and K. Das. The 1999 DARPA Off-line Intrusion Detection Evaluation. Computer Networks, 34(4):579-595, 2000.
10. T. Lodderstedt, D. A. Basin, and J. Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. In Proceedings of the UML 2002 , LNCS(2460), pages 426-441, Germany, 2002.
11. Object Management Group. UML Profile for Modeling Quality of Service and Fault Tolerance Characteristics and Mechanisms. Technical report, September 2004.
12. G. Vigna, S. Eckmann, and R. Kemmerer. Attack Languages. In Proceedings of the IEEE Information Survivability Workshop, Boston, MA, October 2000.
13. Q. Zhang and M. Zulkernine. Applying AsmL Specification for Automatic Intrusion Detection. In Proceedings of the Workshop on Specification and Automated Processing of Security Requirements, pages 221-233, Austria, September 2004.
14. M. Raihan and M. Zulkernine. Detecting Intrusions Specified in a Software Specification Language. In Proceedings of the 29th Annual International Computer Software and Applications Conference (COMP-SAC'05), pages 143-148, Edinburgh, Scotland, July 2005.
15. M. Raihan. AsmLx-Based Intrusion-Aware Software Systems, MSc Thesis, School of Computing, Queen's University, Kingston, Ontario, Canada, June 2006.